hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Use concise API

Browse Source
This commit is contained in:
luchua-bc
2021-03-03 14:07:43 +00:00
parent 1b1c3f953b
commit 502cf38fcc
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql
View File

@@ -48,9 +48,8 @@ class SensitiveCookieNameExpr extends Expr {
ClassInstanceExpr cie // new Cookie("jwt_token", token)
|
(
cie.getConstructor().getDeclaringType().hasQualifiedName("javax.servlet.http", "Cookie") or
cie.getConstructor()
.getDeclaringType()
cie.getConstructedType().hasQualifiedName("javax.servlet.http", "Cookie") or
cie.getConstructedType()
.getASupertype*()
.hasQualifiedName(["javax.ws.rs.core", "jakarta.ws.rs.core"], "Cookie")
) and